Although Microsoft's IE browser has become more and more security, but because of its huge penetration and the version is uneven, so many old versions of the plug-in will also make the new IE browser to become the target of attack. To this end, Microsoft officially announced from now on from IE8 to IE11 browser will automatically screen the old version of ActiveX controls.
ActiveX Plug-ins have a long-standing presence in IE, and most third-party plug-ins, such as Adobe Flash and Java, use ActiveX to render content. Although these plug-ins can help users to watch video and play games on the web, but such plug-ins do not automatically update, so the old version of security vulnerabilities are often exploited by hackers. And Microsoft's efforts are focused on third-party controls that may reduce the security of browsers.
In addition to the ActiveX Plug-ins, the old version of the Java plug-in is also ranked in the blocked list. Microsoft cites a 2013-year security report that says Java 6 is the most common version of the enterprise environment, with more than 80% of the enterprise computers installed in Java. The vulnerabilities of Legacy Java browser plug-ins are well-known, but each time a Java update is not able to solve the vulnerability problem. At the same time, in the installation of the latest version of Java, the old version of the plug-in will not be deleted, so the hidden dangers can not be eliminated, if the user's computer for several years, then the number of missing old version of Java Plug-ins can not imagine.
Microsoft also points out that if some companies rely heavily on ActiveX Plug-ins, administrators can turn on ActiveX control logging, perform a lockdown, add a trusted site, and so on, and eventually even disable a feature directly. In addition, if the old version of the ActiveX Space Shield service detects that a Web page is attempting to open an older version of software other than IE, it also pops up a warning window.